Manage the WAN and LAN Network

Settings

81

AC1600 WiFi Cable Modem Router

Manage the WAN Security Settings

The WAN security settings include port scan protection and denial of service (DoS)

protection, which can protect your LAN against attacks such as Syn flood, Smurf Attack, Ping

of Death, and many others. By default, DoS protection is disabled and a port scan is rejected.

You can also enable the modem router to respond to a ping to its WAN (Internet) port. This

feature allows your modem router to be discovered. Enable this feature only as a diagnostic

tool or if a specific reason exists.



To change the default WAN security settings:

1.

Launch an Internet browser from a computer or WiFi device that is connected to the

network.

2.

Type

.

A login window opens.

3.

Type

admin

for the user name and type your password.

If you did not yet personalize your password, type

password

for the password.

4.

Click the

OK

button.

The BASIC Home page displays.

5.

Select

ADVANCED > Setup > WAN Setup

.

6.

View or change the security settings.

Manage the WAN and LAN Network

Settings

82

AC1600 WiFi Cable Modem Router

7.

The following table describes the protection and ping options on the WAN Setup page.

Field

Description

Disable IPv4 Firewall

Protection

IPv4 firewall protection can secure your network against malicious packets.

To disable IPv4 firewall protection, select the

Disable IPv4 Firewall Protection

check box.

By default, IPv4 firewall protection is enabled. NETGEAR recommends that you

leave the firewall enabled to protect your network.

Disable Port Scan and

DoS Protection

Port scan and DoS protection can protect your LAN against denial of service

attacks such as Syn flood, Smurf Attack, Ping of Death, Teardrop Attack, UDP

Flood, ARP Attack, Spoofing ICMP, Null Scan, and many others. However, when

port scan and DoS protection are enabled, some Apple computers might not be

able to connect to the Internet. By default, port scan and DoS protection are

disabled.

To enable port scan and DoS protection, clear the

Disable Port Scan and DoS

Protection

check box.

Respond to Ping on

Internet Port

By default, this check box is cleared to prevent the modem router from

responding to a ping from the Internet.

To enable the modem router to respond to a ping, select the

Respond to Ping on

Internet Port

check box.

8.

If you changed the settings, click the

Apply

button.

Your settings are saved.

Set Up a Default DMZ Server

The default DMZ server feature is helpful when you are using some online games and

videoconferencing applications that are incompatible with Network Address Translation

(NAT). The modem router can detect some of these applications and function correctly with

them but other applications might not function well. In some cases, one local computer can

run the application correctly if that computer’s IP address is entered as the default DMZ

server.

WARNING:

DMZ servers pose a security risk. A computer that is designated as

the default DMZ server loses firewall protection from exploits on the

Internet. Once compromised, the DMZ server computer attacks

other computers on your network.

Note:

Enabling port scan and DoS protection might affect the performance of the

modem router.

Note:

When you allow the modem router to respond to a ping from the Internet,

the modem router could be discovered by anyone and in that way become

vulnerable to attacks. For optimum security, keep this check box cleared.

Manage the WAN and LAN Network

Settings

83

AC1600 WiFi Cable Modem Router

The modem router discards incoming traffic from the Internet that is not a response to one of

your local computers or a service that you specially set up for this purpose (see

Manage Port

Forwarding to a Local Server for Services, Applications, and Games

on page

166). Instead of

discarding this traffic, you can let the modem router forward the traffic to one computer on

your network. This computer is called the default DMZ server.



To set up a default DMZ server:

1.

Launch an Internet browser from a computer or WiFi device that is connected to the

network.

2.

Type

.

A login window opens.

3.

Type

admin

for the user name and type your password.

If you did not yet personalize your password, type

password

for the password.

4.

Click the

OK

button.

The BASIC Home page displays.

5.

Select

ADVANCED > Setup > WAN Setup

.

The WAN Setup page displays.

6.

Select the

Default DMZ Server

check box.

7.

Type the IP address for the DMZ server.

8.

Click the

Apply

button.

Your settings are saved and the modem router might restart.

Manage the SIP Application-Level Gateway

The application-level gateway (ALG) for the Session Initiation Protocol (SIP) is enabled by

default for enhanced address and port translation. However, some types of VoIP and video

traffic might not work well when the SIP ALG is enabled. For this reason, the modem router

provides the option to disable the SIP ALG.



To disable the default SIP ALG:

1.

Launch an Internet browser from a computer or WiFi device that is connected to the

network.

2.

Type

.

A login window opens.

3.

Type

admin

for the user name and type your password.

If you did not yet personalize your password, type

password

for the password.

4.

Click the

OK

button.

The BASIC Home page displays.

Manage the WAN and LAN Network

Settings

84

AC1600 WiFi Cable Modem Router

5.

Select

ADVANCED > Setup > WAN Setup

.

The WAN Setup page displays.

6.

Select the

Disable SIP ALG

check box.

The SIP ALG is enabled by default.

7.

Click the

Apply

button.

Your settings are saved.

Manage the Modem Router’s LAN IP Address Settings

The modem router is preconfigured to use private IP addresses on the LAN side and to act as

a DHCP server. The modem router’s default LAN IP configuration is as follows:

•

LAN IP address

. 192.168.0.1 (This is the same as www.routerlogin.net and

www.routerlogin.com.)

•

Subnet mask

. 255.255.255.0

These addresses are part of the designated private address range for use in private networks

and are suitable for most applications. The IP address and subnet mask identify which

addresses are local to a specific device and which must be reached through a gateway or

modem router. You might want to change these settings if you need a specific IP subnet that

one or more devices on the network use, or if competing subnets use the same IP scheme.



To change the LAN IP address settings:

1.

Launch an Internet browser from a computer or WiFi device that is connected to the

network.

2.

Type

.

A login window opens.

3.

Type

admin

for the user name and type your password.

If you did not yet personalize your password, type

password

for the password.

4.

Click the

OK

button.

The BASIC Home page displays.

5.

Select

ADVANCED > Setup > LAN Setup

.

Manage the WAN and LAN Network

Settings

85

AC1600 WiFi Cable Modem Router

6.

In the

IP Address

field, enter the LAN IP address for the modem router.

7.

In the

IP Subnet Mask

field, enter the LAN subnet mask for the modem router.

8.

Click the

Apply

button.

Your settings are saved.

If you changed the LAN IP address of the modem router, you are disconnected when the

changes take effect.

To reconnect, close your browser, relaunch it, and log in to the modem router at its new

LAN IP address.

Manage IP Address Reservation

When you specify a reserved IP address for a device on the LAN, that computer always

receives the same IP address each time it accesses the modem router’s DHCP server.

NETGEAR recommends that you assign a reserved IP address to a computer or server that

requires permanent IP settings.

Reserve an IP Address

You must know the IP address and MAC address of a device for which you want to reserve

an IP address.



To reserve an IP address:

1.

Launch an Internet browser from a computer or WiFi device that is connected to the

network.

2.

Type

.